Assistant Group Manager - IT infra & BISO

Metromakro; Pune District; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

Metromakro in Maharashtra's Pune district seeks an IT Infrastructure & Business Information Security Officer to support and maintain enterprise IT operations while ensuring security requirements are implemented across the organization.

The role blends hands-on infrastructure management with information security governance, risk assessment, vulnerability management, and coordination with central Cybersecurity, IT, applications, and business teams to translate security needs into practical actions.

Qualifications

• Total IT experience of 10–12+ years in IT infrastructure and security governance.
• About 10 years of hands-on experience in enterprise infrastructure operations.
• 2–3 years of experience supporting information security, IT risk management, governance, or BISO activities.
• Experience in medium-to-large enterprises or multi-location IT environments.
• Experience coordinating with infrastructure teams, business stakeholders, service providers, and central security functions.

Responsibilities

• Manage and support enterprise IT infrastructure ensuring availability, performance, and operational continuity.
• Administer Windows Server environments, Active Directory, DNS/DHCP, and related services.
• Support Microsoft 365, endpoint management, IAM, and enterprise collaboration platforms.
• Coordinate server, desktop, network, and endpoint infrastructure operations and improvements.
• Monitor and manage incidents, problems, changes, and configurations per ITSM practices.

Job description

Job Purpose

The IT Infrastructure & Business Information Security Officer will be responsible for supporting and maintaining enterprise IT infrastructure operations while ensuring that information security requirements are implemented across the assigned business or organizational entity.

The role combines hands-on IT infrastructure expertise with business information security responsibilities, including security risk identification, vulnerability management, compliance monitoring, security policy implementation, and coordination with central Cybersecurity, IT Infrastructure, application, and business teams.

The ideal candidate should have a strong background in managing IT infrastructure environments, with practical experience in IT security governance and the ability to translate cybersecurity requirements into actionable business and technical activities.

Key Responsibilities

IT Infrastructure Management and Operations - Primary Responsibility

• Manage and support enterprise IT infrastructure, ensuring availability, performance, stability, and operational continuity.
• Administer and support Windows Server environments, Active Directory, Group Policy, DNS, DHCP, and related infrastructure services.
• Support Microsoft 365, endpoint management, identity and access management, and enterprise collaboration platforms, as applicable.
• Manage and coordinate server, desktop, laptop, network, and endpoint infrastructure operations.
• Support network infrastructure, including LAN, WAN, Wi-Fi, VPN, firewalls, switches, routers, and connectivity troubleshooting.
• Coordinate server patching, operating system upgrades, software deployment, endpoint updates, and infrastructure maintenance.
• Monitor infrastructure availability, system health, capacity, and performance; identify and resolve operational issues.
• Manage incidents, problems, and change management processes in accordance with IT service management practices.
• Work with internal IT teams, managed service providers, and external vendors to ensure timely resolution of infrastructure issues.
• Maintain accurate infrastructure documentation, asset inventories, configuration records, support procedures, and operational reports.
• Ensure appropriate access controls, privileged account management, system hardening, and secure infrastructure configuration.
• Support infrastructure audits and ensure compliance with internal IT standards and operational policies.

Business Information Security Officer (BISO) Responsibilities

• Act as the primary coordination point between business/IT infrastructure teams and the central Information Security or CISO organization.
• Support the implementation of corporate information security policies, standards, procedures, and control requirements.
• Identify and assess information security risks associated with infrastructure, endpoints, servers, applications, and business processes.
• Support business security risk assessments and coordinate risk treatment plans with relevant stakeholders.
• Monitor compliance with corporate security requirements and applicable regulatory or industry standards.
• Coordinate with business owners and technical teams to ensure security requirements are understood, assigned, and implemented.
• Support security awareness activities and communicate relevant security requirements to IT and business stakeholders.
• Support internal and external security audits, evidence collection, control validation, and remediation tracking.
• Escalate significant security risks, unresolved findings, policy deviations, and overdue remediation activities to the appropriate stakeholders.
• Support the assessment and approval workflow for security exceptions, ensuring documented risk acceptance by authorized stakeholders.
• Participate in security incident response activities and coordinate with the central Security Operations Center (SOC), IT teams, and business stakeholders.
• Support business continuity and disaster recovery planning from an information security perspective.
• Promote a security-first culture while balancing business requirements and operational priorities.
• Support security reviews of infrastructure changes, new technologies, and third-party service arrangements.
• Ensure security exceptions and deviations are documented, reviewed, and approved through the established governance process.

Experience Requirements

• Overall experience: 10-12 years or more in IT, with the required infrastructure and security experience.
• IT Infrastructure: Approximately 10 years of hands-on experience in enterprise infrastructure operations, administration, support, or management.
• IT Security / BISO: minimum 2-3 years of experience supporting information security, IT risk management, security governance, compliance, or BISO-related activities.
• Experience working in a medium-to-large enterprise or a complex, multi-location IT environment.
• Experience coordinating with infrastructure teams, business stakeholders, service providers, and central security functions.
• Experience prep